{"id":2384892,"url":"https://alion.io/job/american-express-senior-cybersecurity-engineer-i-2","title":"Senior Cybersecurity Engineer I","company":{"id":2209,"name":"American Express","domain":"americanexpress.com","url":"https://alion.io/company/american-express","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":100,"open_postings":50,"ghost_share":0,"stale_share":0.06,"repost_share":0.2,"time_to_fill_p50_days":8,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":20000,"max_usd":44000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"BERT","optional":false},{"name":"CI/CD","optional":false},{"name":"Computer Vision","optional":false},{"name":"Hugging Face","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"NLP","optional":false},{"name":"Python","optional":false},{"name":"PyTorch","optional":false},{"name":"Scikit-learn","optional":false},{"name":"TensorFlow","optional":false},{"name":"Transformers","optional":false}],"status":"live","first_seen_at":"2026-10-12T16:05:56Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-21T09:19:46Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"The Enterprise Technology Services organization partners with every part of the American Express business to power the company’s growth and innovation with trust and efficiency, and drive competitive differentiation with speed. We support the delivery and operations of technology, digital, and data capabilities, platforms, and services globally. Specifically, our team is responsible for the company’s technology engineering, architecture, and infrastructure, providing 24x7 support to ensure an uninterrupted, high-quality experience for customers and colleagues. We also provide product management for core enterprise platforms, and lead technology risk and information security, enterprise data governance and platforms, digital product and design, and enterprise AI platforms on behalf of the company.\n We are seeking an AI/ML Security Data Scientist to develop, evaluate, govern, and operationalize machine-learning security controls that protect enterprise generative-AI applications and traditional machine-learning systems.\nThis position will own critical capabilities involving prompt-injection detection, LLM vulnerability assessment, audio redaction, adversarial-model testing, and secure-model-development practices. The successful candidate will combine strong applied data-science skills with an understanding of cybersecurity, model-risk governance, production ML operations, and regulatory documentation.\nThe role will work closely with AI Firewall engineering, AI Security Enablement, Model Risk Management, Technology Risk and Information Security, product owners, auditors, and external technology providers.\nAI security model development and evaluation:\nDevelop, evaluate, and improve machine-learning controls for prompt-injection detection, LLM vulnerability detection, sensitive-data redaction, and related AI-security use cases.Benchmark open-source, internally developed, and third-party models using representative test datasets.\nDesign training, validation, out-of-sample, and out-of-time evaluation datasets using sound sampling, labeling, and data-quality practices.\nEvaluate model performance using recall, precision, F1 score, Matthews correlation coefficient, accuracy, ROC-AUC, confusion matrices, and other appropriate measures.\n\nRecommend operating thresholds that balance detection effectiveness, false positives, operational impact, and business risk.\nEvaluate emerging audio, image, and video deepfake-detection technologies where relevant to the AI-security portfolio. \nModel-risk management and governance:\nOwn and maintain model documentation for BERT-based prompt-injection detection, LLM vulnerability assessment, and other assigned AI-security models.Prepare model-validation submissions and coordinate responses to Model Risk Management Group requests.\nDocument model purpose, methodology, datasets, assumptions, limitations, compensating controls, performance results, implementation testing, and ongoing monitoring.\n\nDefine class-level performance monitoring and feature-, concept-, and probability-distribution-drift controls.Establish escalation, remediation, retraining, fallback, and model-deactivation criteria.\nEnsure documentation is internally consistent, technically defensible, traceable to evidence, and ready for independent review or audit.\nAudio redaction and sensitive-data protection\n\nSupport the design and implementation of audio-redaction capabilities for enterprise AI applications.Assess centralized-service and embedded-SDK deployment approaches, including scalability, auditability, separation of duties, maintainability, language independence, and circumvention risk.\n\nDevelop evaluation datasets and acceptance criteria for detecting and redacting sensitive data in voice and audio interactions.Partner with platform and application teams to integrate audio-redaction capabilities into production workflows.\nSecure model development lifecycle\n\nConduct adversarial stress testing and robustness assessments for NLP, large-language, computer-vision, and tabular models.Identify model weaknesses, failure modes, integrity issues, and adversarial examples, and recommend remediation.\n\nSupport model scanning, secure model hosting, protection from unsafe model artifacts, and controls addressing model-serialization and software-supply-chain risks.Help integrate model-security testing into APIs, CI/CD pipelines, container platforms, and application-development processes.\n\nContribute reusable tools and processes that reduce the time required to securely evaluate and deploy models.Production enablement and operational support\n\nPartner with AI Firewall engineers to integrate approved models into production security controls.Support the rollout and monitoring of BERT-based prompt-injection detection across generative-AI and agentic use cases.\n\nSupport upgrades or replacements for existing LLM vulnerability-assessment capabilities and the controlled retirement of legacy models.\nInvestigate performance degradation, drift, unexpected model behavior, and production detection issues.Maintain reproducible code, datasets, model artifacts, test results, technical decisions, and transition documentation. \n\nStakeholder engagement:\nTranslate technical model results into clear risk conclusions and recommendations for technical and nontechnical stakeholders.\nWork with model owners, product teams, engineers, cybersecurity teams, governance functions, auditors, and vendors.\nPresent findings, design decisions, limitations, and remediation plans to review committees and senior stakeholders. \nProvide evidence, demonstrations, and technical explanations for regulatory, risk, and audit reviews.\n Minimum Qualifications:\nBachelor’s degree in computer science, data science, statistics, mathematics, cybersecurity, engineering, or a related field, or equivalent practical experience.Five or more years of experience in data science, machine-learning engineering, cybersecurity analytics, or applied AI.\n\nPractical experience developing and evaluating classification or detection models.Strong Python skills and experience with common data-science and ML libraries such as pandas, scikit-learn, PyTorch, TensorFlow, or Hugging Face Transformers.\n\nStrong understanding of:\nTraining, validation, holdout, out-of-sample, and out-of-time testing,\nSampling, labeling, data quality, class imbalance, and statistical evaluation,\nClassification metrics, model thresholds, drift detection, and ongoing monitoring,\nModel limitations, compensating controls, and production fallback strategies,\nExperience deploying or integrating ML models through APIs, containers, Kubernetes, or CI/CD pipelines. Ability to produce rigorous technical and governance documentation.\nStrong written and verbal communication skills, including the ability to respond to independent model reviewers and auditors.","description_format":"text","description_chars":6849,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Commercial & Retail Banks","Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-10-12T20:05:18Z"}],"visa":[],"liveness":{"score":43,"band":"fade","label":"Fading","p_open":1,"p_active":0.774,"p_room":0.55,"age_days":8,"expected_fill_days":8,"reasons":["conf:1","velocity","win:tail","comp:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/american-express-senior-cybersecurity-engineer-i-2","json_url":"https://alion.io/job/american-express-senior-cybersecurity-engineer-i-2.json","meta":{"generated_at":"2026-10-21T10:15:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14496,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2209},"rest":"https://alion.io/mcp/rest/get_company?id=2209"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Famerican-express-senior-cybersecurity-engineer-i-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Famerican-express-senior-cybersecurity-engineer-i-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Famerican-express-senior-cybersecurity-engineer-i-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/american-express-senior-cybersecurity-engineer-i-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Famerican-express-senior-cybersecurity-engineer-i-2"}]}